A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials resulting in default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
05 Dec 2025, 20:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Socomec diris M-70 Firmware
Socomec diris M-70 Socomec |
|
| CPE | cpe:2.3:o:socomec:diris_m-70_firmware:1.6.9:*:*:*:*:*:*:* cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:* |
|
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2025-2138 - Vendor Advisory | |
| References | () https://www.socomec.fr/sites/default/files/2025-04/CVE-2025-20085---Diris-Digiware-Webview-_VULNERABILITIES_2025-04-11-17-14-39_English_0.pdf - Vendor Advisory | |
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2138 - Vendor Advisory |
01 Dec 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Dec 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-01 16:15
Updated : 2025-12-05 20:49
NVD link : CVE-2025-20085
Mitre link : CVE-2025-20085
CVE.ORG link : CVE-2025-20085
JSON object : View
Products Affected
socomec
- diris_m-70
- diris_m-70_firmware
CWE
CWE-306
Missing Authentication for Critical Function